CVE-2000-0029

MediumCVSS 4.6/10Last modified Jun 16, 2026

Description

UnixWare pis and mkpis commands allow local users to gain privileges via a symlink attack.

Metrics

CVSS 2.0 4.6/10AV:L/AC:L/Au:N/C:P/I:P/A:P

Affected software

No affected versions have been published.

Timeline

Published
Dec 27, 1999
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2000

CVE-2000-00305.0Solaris dmispd dmi_cmd allows local users to fill up restricted disk space by adding files to the /var/dmi/db database.CVE-2000-00316.2The initscripts package in Red Hat Linux allows local users to gain privileges via a symlink attack.CVE-2000-003210.0Solaris dmi_cmd allows local users to crash the dmispd daemon by adding a malformed file to the /var/dmi/db database.CVE-2000-00335.0InterScan VirusWall SMTP scanner does not properly scan messages with malformed attachments.CVE-2000-00345.0Netscape 4.7 records user passwords in the preferences.js file during an IMAP or POP session, even if the user has not enabled "remember pasCVE-2000-00354.6resend command in Majordomo allows local users to gain privileges via shell metacharacters.CVE-2000-00365.0Outlook Express 5 for Macintosh downloads attachments to HTML mail without prompting the user, aka the "HTML Mail Attachment" vulnerability.CVE-2000-00374.6Majordomo wrapper allows local users to gain privileges by specifying an alternate configuration file.CVE-2000-00387.5glFtpD includes a default glftpd user account with a default password and a UID of 0.CVE-2000-00395.0AltaVista search engine allows remote attackers to read files above the document root via a .. (dot dot) in the query.cgi CGI program.CVE-2000-004010.0glFtpD allows local users to gain privileges via metacharacters in the SITE ZIPCHK command.CVE-2000-00415.0Macintosh systems generate large ICMP datagrams in response to malformed datagrams, allowing them to be used as amplifiers in a flood attack
CVE-2000-0029: Medium severity, CVSS 4.6 | Vulnix